Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32332d3233203d3e20323632343933.roa
File:                     3137372e382e35322e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          eFqPzx7NH9tK5VnNB4Oef9V3j/fNFFkzH6mCr4ytYq4=
Subject key identifier:   57:28:D4:F6:20:3C:2D:8A:67:61:8E:A2:62:D5:DC:58:87:31:A5:1C
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       1AB539635470DDBF3064F9FF7E1354873D478CB0
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:49 +0000
ROA not before:           Mon 09 Sep 2024 14:59:49 +0000
ROA not after:            Mon 08 Sep 2025 15:04:49 +0000
asID:                     262493
IP address blocks:        177.8.52.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b5:39:63:54:70:dd:bf:30:64:f9:ff:7e:13:54:87:3d:47:8c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:49 2024 GMT
            Not After : Sep  8 15:04:49 2025 GMT
        Subject: CN=5728D4F6203C2D8A67618EA262D5DC588731A51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:8c:d3:1f:f9:ff:b4:cf:b1:ec:71:4d:ba:
                    99:e0:09:57:36:ef:10:09:ef:4a:70:1c:0e:09:85:
                    b3:b9:cd:56:d2:77:6b:98:7b:bd:c2:1e:52:23:1b:
                    cc:63:eb:2f:c9:24:bc:78:5d:cb:7a:d3:47:cc:2a:
                    18:08:80:44:00:60:5f:c5:cb:d2:7a:c9:96:73:70:
                    1f:86:a3:e2:1a:c0:d2:b2:e0:49:24:30:1b:76:47:
                    c0:95:35:8c:61:56:f8:a4:5d:5d:e7:24:43:41:46:
                    3c:51:60:6c:64:d7:f4:be:67:a6:e3:6b:b9:34:ca:
                    74:8b:68:93:39:54:15:33:f6:b4:52:34:1a:c5:53:
                    2c:54:d7:48:2b:6c:69:d9:a2:9c:67:8f:a4:06:24:
                    9c:3f:a9:fb:b8:14:af:cc:2d:4f:c2:79:28:99:3f:
                    ee:5e:3a:96:51:f8:d6:9f:eb:34:e2:30:e3:55:9b:
                    e1:5a:7f:f1:e2:5b:94:10:c5:20:68:6c:d5:81:f5:
                    8a:69:39:d2:e4:fc:0e:57:f9:7b:51:f4:07:f1:3e:
                    d1:29:fa:f2:93:8d:e9:6d:fc:e6:40:10:cf:9d:32:
                    b4:83:a2:bf:2e:48:ba:fc:6d:b5:17:dc:b2:33:0f:
                    fa:6f:6e:2d:c6:07:9e:80:e9:20:bc:d6:e1:fd:0b:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:28:D4:F6:20:3C:2D:8A:67:61:8E:A2:62:D5:DC:58:87:31:A5:1C
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35322e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:a7:26:ad:39:0e:dc:ac:d7:6c:7f:db:04:f0:6f:4f:1c:0c:
         49:07:17:94:b8:34:7f:49:c4:4c:22:3d:0c:29:d4:1a:8a:95:
         9e:9f:61:d1:31:2f:7b:c6:36:b6:51:1b:e7:4a:78:84:63:35:
         16:6f:c6:1a:df:6d:40:18:06:de:c7:fc:31:58:f4:5e:58:0c:
         bc:94:36:e1:f5:0b:48:92:36:61:b7:f6:c3:53:09:9a:10:34:
         5f:0e:47:5f:36:4f:a9:47:16:56:20:59:e0:de:06:2e:5c:65:
         d3:96:40:b4:3e:d2:eb:61:9f:38:67:01:c5:9e:02:a1:25:da:
         5e:6b:46:f8:ce:88:b6:42:59:1e:a2:b3:b9:f8:9a:a1:50:a1:
         08:3a:6f:43:54:15:e3:af:9f:c4:40:70:97:3c:4e:99:44:31:
         6a:c7:6a:80:f0:c9:1b:e2:92:d6:d4:4e:ea:9b:21:34:15:84:
         e3:42:32:03:cd:a6:44:05:73:c8:82:e0:38:94:b9:87:9d:b1:
         0a:1f:42:eb:26:5c:93:5d:97:c7:5e:5b:37:ab:5f:79:ee:61:
         c3:2b:7c:de:79:4a:35:d2:17:cb:68:b1:5d:4d:ba:bd:17:23:
         be:68:1c:cc:66:9c:66:32:27:95:4a:05:d8:59:4f:8c:c6:9a:
         7f:b3:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org